Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/01809b-42dd-4136-96b1-1fd10d8e075f/1/Q8d7RzY2gTePrORmFB1UzIg5nPU.mft
File: Q8d7RzY2gTePrORmFB1UzIg5nPU.mft (raw, json)
Hash identifier: DumrRxitdLXGHVImSDC501+P1jrtw+mYpuSX3yprCp4=
Subject key identifier: 59:89:17:9D:BA:4F:FF:96:37:2C:95:E0:91:49:0C:43:13:C4:FD:4A
Authority key identifier: 43:C7:7B:47:36:36:81:37:8F:AC:E4:66:14:1D:54:CC:88:39:9C:F5
Certificate issuer: /CN=43c77b47363681378face466141d54cc88399cf5
Certificate serial: 019CA97D2B494A05EDA215D54B6FCE3A96AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q8d7RzY2gTePrORmFB1UzIg5nPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/01809b-42dd-4136-96b1-1fd10d8e075f/1/Q8d7RzY2gTePrORmFB1UzIg5nPU.mft
Manifest number: 17D7
Signing time: Sun 01 Mar 2026 13:01:18 +0000
Manifest this update: Sun 01 Mar 2026 13:01:18 +0000
Manifest next update: Mon 02 Mar 2026 13:01:18 +0000
Files and hashes: 1: 1XdNFJlYALUGMKogiIBRKN_MGo4.roa (hash: E2oHH/KY2uFlsQZera9X/UCkx0/EdwNbRkr7QYI3dr0=)
2: Q8d7RzY2gTePrORmFB1UzIg5nPU.crl (hash: QYXYUpbS0C3NXd77ZvmV6PL04lT2yxac0qbYZwBPVqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/01809b-42dd-4136-96b1-1fd10d8e075f/1/Q8d7RzY2gTePrORmFB1UzIg5nPU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/01809b-42dd-4136-96b1-1fd10d8e075f/1/Q8d7RzY2gTePrORmFB1UzIg5nPU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q8d7RzY2gTePrORmFB1UzIg5nPU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 13:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:7d:2b:49:4a:05:ed:a2:15:d5:4b:6f:ce:3a:96:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43c77b47363681378face466141d54cc88399cf5
Validity
Not Before: Mar 1 13:01:18 2026 GMT
Not After : Mar 2 13:01:18 2026 GMT
Subject: CN=5989179dba4fff96372c95e091490c4313c4fd4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ff:87:48:0a:55:19:ea:2e:23:1b:35:de:65:
d2:8b:fb:b0:c4:ba:ca:f0:ec:0e:ec:89:03:64:17:
90:a0:94:51:51:89:40:c9:cf:c5:85:a6:64:5a:a9:
33:bb:ef:f8:9a:02:7f:a0:c5:c4:02:42:a8:95:5d:
e5:8f:0c:52:6b:57:ff:9c:9d:b7:68:d5:db:4a:ae:
0c:1c:34:6b:70:75:f3:92:17:a3:94:40:d9:6a:da:
da:95:5c:6c:1c:5c:a4:23:01:83:bb:57:1c:db:ef:
b6:31:f6:07:84:2d:4a:35:b6:9e:2f:c4:43:7c:2d:
30:71:a6:1f:19:ff:9e:24:2a:c3:ef:03:8f:44:12:
08:be:7f:21:1c:1c:1f:61:6b:b9:35:99:2e:62:38:
7c:df:2c:ab:81:a0:c2:fa:0a:d1:58:5c:80:e5:f7:
72:fa:66:7d:23:a0:f3:d7:88:79:68:fa:1e:a3:87:
97:b9:e3:8a:22:68:6f:df:82:32:d4:da:d0:ee:5e:
e6:af:87:ee:6c:f9:a9:cf:af:b0:44:49:fc:b3:47:
d8:19:62:3b:05:cd:4a:7d:cb:25:0d:49:a4:10:11:
02:55:d4:61:25:c8:05:cf:f6:fc:d7:a9:c1:42:dd:
cb:88:32:21:91:af:c6:34:2a:68:82:80:d2:db:2b:
2d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:89:17:9D:BA:4F:FF:96:37:2C:95:E0:91:49:0C:43:13:C4:FD:4A
X509v3 Authority Key Identifier:
keyid:43:C7:7B:47:36:36:81:37:8F:AC:E4:66:14:1D:54:CC:88:39:9C:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q8d7RzY2gTePrORmFB1UzIg5nPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/01809b-42dd-4136-96b1-1fd10d8e075f/1/Q8d7RzY2gTePrORmFB1UzIg5nPU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/01809b-42dd-4136-96b1-1fd10d8e075f/1/Q8d7RzY2gTePrORmFB1UzIg5nPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:54:61:a3:ba:3f:72:5c:c0:7f:fa:be:8d:b5:7a:d5:51:41:
3a:05:a2:e1:76:54:67:8b:c9:59:08:c3:df:70:b5:67:3b:e6:
dc:a8:18:fd:19:a5:ee:76:31:b4:0b:ce:9c:9d:d6:87:6d:43:
80:14:ea:73:3b:64:f3:33:5f:f2:80:38:e0:0e:62:11:58:ba:
2d:fb:29:1f:29:27:d5:9c:0d:47:27:59:a5:04:0c:d9:e9:41:
13:a7:07:d3:71:97:d7:80:b4:7b:bc:f3:32:e3:9f:80:a4:82:
a5:f0:d8:2f:9e:85:49:af:aa:fb:76:7c:c7:82:d5:87:40:b9:
8e:99:da:5d:ba:74:87:5a:b1:34:22:15:d3:a0:ec:5a:f0:f7:
58:ae:cf:c2:50:82:4c:0f:bc:76:d6:9b:22:bd:8c:90:02:eb:
b5:8f:22:9a:dd:ae:73:25:30:be:82:13:96:d6:1f:5c:a4:57:
51:ac:73:21:9e:20:96:2d:a8:66:13:ba:1f:15:9a:27:45:37:
12:26:95:7a:ee:c3:d7:ac:94:f8:51:57:ff:2e:c3:b1:b8:c5:
02:39:b6:3d:5f:15:17:df:23:3a:2a:3f:c6:e0:5e:aa:84:44:
23:d4:93:3f:91:38:47:33:7a:f2:38:aa:30:84:38:77:c6:05:
30:43:ef:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:43:51 2026 by rpki-client